4. Upgrade once or twice a year, or as needed by security fixes. CiviCRM's new releases are unstable, even when they say they are 'stable'. Beta is out of the question. Avoid earlier revisions. Do not install version: x.y.0 or x.y.1, for instance.